From sten@mx1.blinkenlights.nl  Fri Sep 25 22:48:14 2009
Return-Path: <sten@mx1.blinkenlights.nl>
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
	by hub.freebsd.org (Postfix) with ESMTP id 81488106566B
	for <FreeBSD-gnats-submit@freebsd.org>; Fri, 25 Sep 2009 22:48:14 +0000 (UTC)
	(envelope-from sten@mx1.blinkenlights.nl)
Received: from mx1.blinkenlights.nl (mx1.blinkenlights.nl [IPv6:2a02:898:17:8000::25])
	by mx1.freebsd.org (Postfix) with ESMTP id 254458FC17
	for <FreeBSD-gnats-submit@freebsd.org>; Fri, 25 Sep 2009 22:48:13 +0000 (UTC)
Received: by mx1.blinkenlights.nl (Postfix, from userid 1001)
	id E2BEB1141E; Sat, 26 Sep 2009 00:48:11 +0200 (CEST)
Message-Id: <20090925224811.E2BEB1141E@mx1.blinkenlights.nl>
Date: Sat, 26 Sep 2009 00:48:11 +0200 (CEST)
From: Sten Spans <sten@blinkenlights.nl>
Reply-To: Sten Spans <sten@blinkenlights.nl>
To: FreeBSD-gnats-submit@freebsd.org
Cc:
Subject: IPv6 blackhole / reject routes broken
X-Send-Pr-Version: 3.113
X-GNATS-Notify:

>Number:         139145
>Category:       kern
>Synopsis:       [ip6] IPv6 blackhole / reject routes broken
>Confidential:   no
>Severity:       serious
>Priority:       medium
>Responsible:    qingli
>State:          closed
>Quarter:        
>Keywords:       
>Date-Required:  
>Class:          sw-bug
>Submitter-Id:   current-users
>Arrival-Date:   Fri Sep 25 22:50:01 UTC 2009
>Closed-Date:    Fri Dec 04 18:54:37 UTC 2009
>Last-Modified:  Fri Dec 04 18:54:37 UTC 2009
>Originator:     Sten Spans
>Release:        FreeBSD 8.0-RC1 amd64
>Organization:
>Environment:
System: FreeBSD towel.blinkenlights.nl 8.0-RC1 FreeBSD 8.0-RC1 #0: Thu Sep 17 18:50:57 UTC 2009 root@mason.cse.buffalo.edu:/usr/obj/usr/src/sys/GENERIC amd64


	
>Description:
	IPv6 blackhole/reject routes don't work as expected/documented.
>How-To-Repeat:
	route an IPv6 netblock to a host, enable forwarding,
	add a blackhole route with iface lo0, observe the icmp6 replies.

	towel# sysctl -w net.inet6.ip6.forwarding=1
	net.inet6.ip6.forwarding: 0 -> 1
	towel# route add -inet6 -net 2a02:898:17::/48 -iface lo0 -blackhole
	add net 2a02:898:17::/48: gateway lo0

	sten@bastard:~$ traceroute6 2a02:898:17:1234::
	traceroute to 2a02:898:17:1234:: (2a02:898:17:1234::) from 2001:7b8e00:4, 30 hops max, 24 byte packets
 	1  gw.nkenlights.nl (2001:7b8:666:ffff::1)  0.274 ms  0.203 ms  0.145 ms
 	2  hobby.etwork.bit.nl (2001:7b8:3:47::2)  0.451 ms  0.384 ms  0.308 ms
 	5  dcg-1-.clue.net (2a02:898:8283:2::1)  6.142 ms  5.516 ms  5.512 ms
 	6  eddie.blinkenlights.nl (2a02:898::74:2)  3.474 ms  3.458 ms  2.968 ms
 	7  2a02:898:17:ffff::2 (2a02:898:17:ffff::2)  2.862 ms 3.012 ms 3.293 ms
 	8  2a02:898:17:ffff::2 (2a02:898:17:ffff::2)  3.205 ms 4.055 ms 2.965 ms
 	9  2a02:898:17:ffff::2 (2a02:898:17:ffff::2)  3.256 ms 3.95 ms  3.9 ms

>Fix:

	


>Release-Note:
>Audit-Trail:
Responsible-Changed-From-To: freebsd-bugs->freebsd-net 
Responsible-Changed-By: linimon 
Responsible-Changed-When: Sat Sep 26 16:00:26 UTC 2009 
Responsible-Changed-Why:  
Over to maintainer(s). 

http://www.freebsd.org/cgi/query-pr.cgi?pr=139145 

From: Sten Spans <sten@blinkenlights.nl>
To: FreeBSD-gnats-submit@FreeBSD.org
Cc:  
Subject: Re: kern/139145: IPv6 blackhole / reject routes broken
Date: Thu, 29 Oct 2009 00:05:45 +0100 (CET)

 On Fri, 25 Sep 2009, FreeBSD-gnats-submit@FreeBSD.org wrote:
 
 >> Category:       kern
 >> Responsible:    freebsd-bugs
 >> Synopsis:       IPv6 blackhole / reject routes broken
 >> Arrival-Date:   Fri Sep 25 22:50:01 UTC 2009
 
 Not sure which commit fixed it but this issue seems to
 be fixed in 8.0-RC2:
 
 traceroute to 2a02:898:17:1234:: (2a02:898:17:1234::) from 
 2001:7b8:666:ffff:0:42ff:fe00:4, 30 hops max, 24 byte packets
   1  gw.deepthought.blinkenlights.nl (2001:7b8:666:ffff::1)  0.292 ms  0.227 ms  0.193 ms
   2  hobby-gw.jun1.galilei.network.bit.nl (2001:7b8:3:47::2)  0.357 ms  0.402 ms  0.461 ms
   3  nikhef.ams-ix.ipv6.intouch.net (2001:7f8:1::a500:8954:1)  2.603 ms  2.494 ms  2.234 ms
   4  2001:6e0:8954:205b:1::2 (2001:6e0:8954:205b:1::2)  5.103 ms  5.144 ms  5.829 ms
   5  ge-0-0-1-0.dcg-1.ipv6.coloclue.net (2a02:898:0:301::a)  5.238 ms  6.026 ms  6.345 ms
   6  eddie.blinkenlights.nl (2a02:898::74:2)  3.18 ms  3.158 ms  4.044 ms
   7  * * *
 
 -- 
 Sten Spans
 
 "There is a crack in everything, that's how the light gets in."
 Leonard Cohen - Anthem

From: Sten Spans <sten@blinkenlights.nl>
To: "Li, Qing" <qing.li@bluecoat.com>
Cc: FreeBSD-gnats-submit@FreeBSD.org, freebsd-net@freebsd.org
Subject: RE: kern/139145: IPv6 blackhole / reject routes broken
Date: Thu, 29 Oct 2009 08:33:03 +0100 (CET)

 On Wed, 28 Oct 2009, Li, Qing wrote:
 
 > I remember looking at this bug and tried to reproduce it ...
 >
 > If my memory serves me right, I believe this bug was fixed by
 > svn r197364, committed on 9/20.  RC1 was built on 9/17.
 >
 > Another symptom of this bug is the "route get" command issued
 > on any lo0 addresses returns "destination: default" instead
 > of "destination: lo0".
 
 That indeed looks like the culprit, thanks for fixing it.
 
 -- 
 Sten Spans
 
 "There is a crack in everything, that's how the light gets in."
 Leonard Cohen - Anthem
State-Changed-From-To: open->closed 
State-Changed-By: qingli 
State-Changed-When: Fri Dec 4 18:53:31 UTC 2009 
State-Changed-Why:  
The fix had been committed and verified by the submitter. 



Responsible-Changed-From-To: freebsd-net->qingli 
Responsible-Changed-By: qingli 
Responsible-Changed-When: Fri Dec 4 18:53:31 UTC 2009 
Responsible-Changed-Why:  
The fix had been committed and verified by the submitter. 


http://www.freebsd.org/cgi/query-pr.cgi?pr=139145 
>Unformatted:
